Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wininet32' = '%WINDIR%\wininet32.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyOverride' = 'local'
- [<HKLM>\SYSTEM\ControlSet001\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings] 'ProxyEnable' = '00000001'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyEnable' = '00000001'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyServer' = '127.0.0.1:8080'
- %WINDIR%\iewin32.dll
- %WINDIR%\wininet32.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\file_2222[1].php
- 'wo####racker.biz':80
- 'localhost':1036
- wo####racker.biz/v3/file_2222.php
- DNS ASK wo####racker.biz
- ClassName: 'Indicator' WindowName: ''